Extracted

• • Target

    f2f32bba134c9ca4a287a846d0e638ab_JaffaCakes118

  • Size

    107KB

  • MD5

    f2f32bba134c9ca4a287a846d0e638ab

  • SHA1

    34e99bef31fefd592d8dda93ba67c64a5c85fedf

  • SHA256

    6b1467f104192f1e872284825fcc150a433fe877632b612fb33c17ca14f3c8dd

  • SHA512

    755c5cc96ce5b70f431d7a6d204cc0a93659495be2540c9fa90dfdf822156526796b6385be9bf6f52a101d0ec66bc4166a1fde093bb52404069b4a57ae057e92

  • SSDEEP

    3072:eN9Cm584YCZeEN0i6MmW9KLyxYUFtCmifBss1i:HmrTZeE7Pm/UF4jM

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2